Infrastructure as code pre-deployment compliance testing

A method comprising:

• using one or more computer devices, which are configured to implement a unified cloud configuration evaluation (UCCE) system, to perform:
• obtaining, from a cloud computing infrastructure provider service, live asset configuration data about assets in a cloud environment hosted by the cloud based cloud computing infrastructure provider service, the live asset configuration data being in a first format associated with the cloud computing infrastructure provider service;
• converting the live asset configuration data from the first format to a second format associated with the UCCE system;
• generating a first model of the cloud environment using the live asset configuration data in the second format associated with the UCCE system;
• obtaining a cloud configuration definition created in a cloud configuration development (CCD) system specifying proposed configuration changes to the cloud environment, the cloud configuration definition being in a third format associated with the CCD system;
• converting the cloud configuration definition from the third format associated with the CCD system to the second format associated with the UCCE system;
• generating a second model reflecting the proposed configuration changes using the cloud configuration definition in the second format associated with the UCCE system;
• and
• evaluating compliance of the live asset configuration data and the proposed configuration changes using a set of compliance rules by:
• evaluating compliance of the live asset configuration data by applying the set of compliance rules to the first model, and
• evaluating compliance of the proposed configuration changes by applying the set of compliance rules to the second model.

One or more non-transitory computer-readable storage media storing program instructions that when executed on one or more processors implement a unified cloud configuration evaluation (UCCE) system and cause the UCCE system to perform:

• obtaining, from a cloud computing infrastructure provider service, live asset configuration data about assets in a cloud environment hosted by the cloud computing infrastructure provider service, the live asset configuration data being in a first format associated with the cloud computing infrastructure provider service;
• converting the live asset configuration data from the first format to a second format associated with the UCCE system;
• generating a first model of the cloud environment using the live asset configuration data in the second format associated with the UCCE system;
• obtaining a cloud configuration definition created in a cloud configuration development (CCD) system specifying proposed configuration changes to the cloud environment, the cloud configuration definition being in a third format associated with the CCD system;
• converting the cloud configuration definition from the third format associated with the CCD system to the second format associated with the UCCE system;
• generating a second model reflecting the proposed configuration changes using the cloud configuration definition in the second format associated with the UCCE system;
• and
• evaluating compliance of the live asset configuration data and the proposed configuration changes using a set of compliance rules by:
• evaluating compliance of the live asset configuration data by applying the set of compliance rules to the first model, and
• evaluating compliance of the proposed configuration changes by applying the set of compliance rules to the second model.